# CenterPoint Energy confirms major data breach

> A US energy utility admits hackers stole 7.5 million customer files through an exposed API.
- Title: CenterPoint Energy confirms major data breach · TechRadar
- Summary: A US energy utility admits hackers stole 7.5 million customer files through an exposed API. CenterPoint Energy confirmed a cyberattack exposed millions of…
- Keywords: centerpoint energy, data breach, cyberattack, api vulnerability, customer data, social security numbers, dark web, incident response, regulatory notification, energy utility, technology, CenterPoint
- Source: TechRadar — https://techradar.com/pro/security/centerpoint-energy-confirms-hackers-compromised-networks-and-stole-data-and-the-hackers-claim-theft-of-7-5-million-files
- Published: 2026-09-16T16:10:00+00:00
- Read time: 1 min
- Topics: centerpoint energy, data breach, cyberattack, api vulnerability, customer data, social security numbers, dark web, incident response, regulatory notification, energy utility, technology
## Major US energy company hit by cyberattack
CenterPoint Energy, which serves millions with electricity and natural gas, confirmed hackers compromised its networks and stole customer data through an exposed API.
## Hackers claim 7.5 million files stolen
A threat actor posted on a dark web forum claiming they obtained 7.49 million CenterPoint files, including customer names, billing data, driver's license info, and last four digits of Social Security numbers.
## Company launches investigation with experts
CenterPoint activated incident response protocols and brought in third-party cybersecurity experts to determine the scope of the breach and which customers were affected.
## Operations continue, regulators notified
The cyberattack did not disrupt CenterPoint's electricity and gas delivery operations, which continue normally. Police and regulatory agencies have been notified of the incident.
## Customers will be notified of breach
CenterPoint plans to notify all affected customers and regulatory authorities as required by law. The company expects to incur significant expenses from the investigation and response efforts.

> The company is continuing to work with third-party experts to determine the scope of customers and personal information affected by the incident.
## Key takeaway

CenterPoint Energy confirmed a cyberattack exposed millions of customer records including names, SSNs, and billing data, with the company now investigating scope and notifying regulators.